# ScoreBadgeComponent
Score badge component displaying evidence flags with icons and labels.
## Overview
The `ScoreBadgeComponent` displays evidence quality flags that provide context about score reliability and data sources.
## Selector
```html
```
## Inputs
| Input | Type | Default | Description |
|-------|------|---------|-------------|
| `type` | `ScoreFlag` | required | The flag type to display |
| `size` | `'sm' \| 'md'` | `'md'` | Size variant |
| `showTooltip` | `boolean` | `true` | Show description on hover |
| `showLabel` | `boolean` | `true` | Show label text (false = icon only) |
## Flag Types
| Type | Icon | Color | Description |
|------|------|-------|-------------|
| `live-signal` | Signal wave | Green (`#16A34A`) | Active runtime signals detected from deployed environments |
| `proven-path` | Checkmark | Blue (`#2563EB`) | Verified reachability path to vulnerable code |
| `vendor-na` | Strikethrough | Gray (`#6B7280`) | Vendor has marked as not affected |
| `speculative` | Question mark | Orange (`#D97706`) | Evidence is speculative or unconfirmed |
## Usage Examples
### Basic Usage
```html
```
### All Flag Types
```html
```
### Size Variants
```html
```
### Icon-Only Mode
```html
```
### With Score Pill
```html
```
### Rendering from Flags Array
```html
@for (flag of scoreResult.flags; track flag) {
}
```
### In a Table
```html
@for (flag of finding.score?.flags; track flag) {
}
|
```
## Flag Significance
### live-signal (Green - High Confidence)
Indicates the vulnerability affects code that is actively being executed in production. This is the highest confidence indicator and typically elevates priority.
**Sources:**
- Runtime telemetry from deployed containers
- Function call traces
- Code coverage data from production
### proven-path (Blue - Confirmed)
A verified call path from application entry points to the vulnerable function has been confirmed through static or dynamic analysis.
**Sources:**
- Static reachability analysis
- Dynamic call graph analysis
- Fuzzing results
### vendor-na (Gray - Vendor Override)
The software vendor has issued a VEX statement indicating this vulnerability does not affect their product configuration or version.
**Sources:**
- Vendor VEX documents
- CSAF advisories
- Distro security teams
### speculative (Orange - Unconfirmed)
The evidence for this vulnerability is speculative or based on incomplete analysis. Score caps are typically applied.
**Sources:**
- Incomplete static analysis
- Heuristic-based detection
- Unverified reports
## Accessibility
- Uses `role="img"` with descriptive `aria-label`
- Tooltip shown on focus for keyboard users
- Icon colors meet WCAG AA contrast requirements
- Screen reader announces full flag description
## Styling
```css
stella-score-badge {
--badge-font-size: 12px;
--badge-padding: 4px 8px;
--badge-border-radius: 4px;
}
```
### Live Signal Animation
The live-signal badge features a subtle pulse animation to draw attention:
```css
@keyframes pulse {
0%, 100% { opacity: 1; }
50% { opacity: 0.7; }
}
.live-signal-badge {
animation: pulse 2s ease-in-out infinite;
}
```
## Related Components
- [ScorePill](./score-pill.md) - Compact score display
- [ScoreBreakdownPopover](./score-breakdown-popover.md) - Full breakdown with flags section